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In this paper, we present linear programming-based sufficient conditions, some of them polynomial- 
time, to establish the liveness and memory boundedness of general dataflow process networks. Fur- 
thermore, this approach can be used to obtain safe upper bounds on the size of the channel buffers of 
such a network. 

1 Introduction 

With the frequency version of Moore's law coming to an end, a new generation of massively multi-core 
microprocessors is emerging. This has triggered a regain of interest for the so-called dataflow program- 
ming models in which one expresses computation-intensive applications as networks of concurrent tasks 
interacting through (and only through) unidirectional FIFO channels. 

Our main result is a linear programming model (Sect. [2]) of the states of a general Dataflow Process 
Network (DPN), in the sense of Lee & Parks CD, which allows to obtain a polynomial-time sufficient 
condition for both liveness (in a sense which is defined in Sect. [3]> and memory boundedness (Sect. [4]). 
Furthermore, this approach can be turned into a safe buffer dimensioning method. 

2 Modelling system states 

2.1 Notations and general assumptions 

Let T and F respectively denote the set of tasks and channels. 

To each task t G T, we associate a state-transition graph G t = ({v|°^} U V,,{t/°'} UA f ) (parallel 
arcs and loops are allowed), where denotes the initial state of task t and where t/ ' denotes the 
initial transition of that task, this transition being unique and unconditional. Also, given t G T, P t C F 
(respectively Q C F) denotes the set of channels in which t produces (respectively consumes) data. 
Note that we have P, PlC, = 0. Also note that for each t,t' £T 2 ,t / t', we have P t nP t > = as well as 

c f nc f / = 0. 

Let t G T, T G A, and / G P t (respectively / G Q), qp T ^ (respectively qc T y) denotes the amount of data 
produced (respectively consumed) in channel / by task t when transition T is executed. An additional 
constraint is that, \/t G T, Vt G A t , 

L qpt/+ £ qp T/ >o, (i) 

feP, fee, 

thereby excluding the existence of transitions having no effect on any of the channels. 
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Given / G F, pf and Cf respectively denote the tasks which produce and consume data in channel /. 
Also, df denote the capacity of the buffer associated to channel / (depending on the problem at hand df 
can be either given or unknown, as we shall later see). 

In the sequel, it is further assumed without loss of generality that the network graph, the directed 
graph having the tasks as vertices and the channels as arcs, is (simply) connected. 

2.2 Variables and linear constraints 

For all TG Ue7-W 0) }UA, we introduce a variable denoted by n T G Z + which indicates the number of 
times transition x has been executed. In order for the n % to represent admissible system states, a number 
of (linear) constraints must be satisfied. 

Initialization constraints. Let t G T, initial transition xj ^ must have been executed once and only 
once, thus, n (o) = 1. 

Conservation constraints. Let t G T and v G V t . We then have the following constraint: 

T£(0~(y) TGffl+(v) TG(0~(v) 

Such a constraint simply reflects the fact that for the n T 's to represent an admissible system state, vertex 
v must have been left as many times it has been entered or as many times minus one (in which case it 
defines the current state of t). If Ltg£o+(v) w t = Ereo- {v) n t ~ 1> tnen the system state described by the 
« T 's is such that task t is in state v. 

For convenience, let y v = Ereo-fv) n t ~ E-re<o+(v) n % meaning that y v = if task t is not in state v and 
1 otherwise. Remark that state vf^ is duly excluded from the previous sums as this state is by definition 
left once and never entered. 

Unicity constraints. Furthermore, for the system state described by the « T 's to be admissible, each 
task must be in one and only one state. That is, for each t G T, if Evev, Yv = 1- Again, note that is 
duly excluded from the previous sum. 

Consistency constraints. Let / G F, let qpy = Ei€A p ^qPr/ an d qc/ = Etga c/ n ?°i c Tf respectively 
denote the amount of data so far produced and consumed on channel / (for convenience). For the « T 's to 
describe a valid system state, we must have qp^ > qc^. 

Capacity constraints. Also, for each / G F, we must have 

qp/-qc/<d/. (2) 

3 Modelling undesirable system properties 
3.1 Strong and weak blockedness 

In a given system state, a task t G T is strongly blocked when it is in a state v in which no outgoing 
transition can be executed. Consider the following sets of constaints, for each x = (v, v') G A t , 

' Yv < 0, (3) 
< qp / -qc / <qc T/ -l, for each feQ, (4) 

k qc/-qP/<qp T/ -d/-l, for each feP t . (5) 
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Then, strong blockedness means that for each z = (v,v ; ) G A t either constraint ([3]> or at least one the 
constraints of type ([4]) or at least one of the constraints of type ([5]) is satistifed for task t. 

In a given system state, a task t G T is weakly blocked when it is in a state v in which not all outgoing 
transitions can be executed. Consider the following sets of constraints, for each t G T and for each v G V t , 

' Yv < 0, (6) 
< qpy — qcj < qc T y — 1, for each % = (v,v') G A, and for each / G C t , (7) 

qcy— qpj < qp T y — df— 1, for each T = (v, v') G A f and for each f £P t . (8) 

Then, weak blockedness signifies that for each ? G T and for each v G V f either constraint ([6]) or at least 
one the constraints of type Q or at least one of the constraints of type ([8]> is satistifed for task t. 

The above strong blockedness property is suitable to model non deterministic tasks whereas the weak 
blockedness property allows modelling deterministic ones (enforcing the fact that, when the task is in a 
given state, all outgoing transitions are feasible so as to guarantee that the next transition the task has to 
do is possible). 

3.2 Sufficient liveness conditions 

Although the definitions of the strong and weak blockedness properties involves disjunctive constraints, 
these can be linearized using standard linear programming modelling techniques (see e.g., 0). 

Thus, given a DPN and a dimensioning d G l} F ' we have shown how to formulate an integer linear 
system of inequalities, 

{xeU 1 :Ax<b{d)} (9) 

which inconsistency, i.e. {x : Ax < b(d),x G Z"} = 0, is sufficient to establish the liveness of the network. 
A fortiori, the inconsistency of the continuous relaxation of that system, {x : Ax < b(d),x G W 1 } = 0, 
provides a polynomial-time (weaker) sufficient condition to establish that property. 



4 Memory boundedness of a DPN 
4.1 Monotony with respect to dimensioning 

As shown by Lee & Parks [1] the DPN formalism is equivalent to the well-known Kahn Process Networks 
(KPN) formalism. Thus, DPN also exhibit the determinism property exhibited by KPN whereby, for a 
given input, the data circulating on the channels does not depend on the execution trace. This very 
convenient property allows, still for a given input, to derive general network properties from properties 
exhibited by particular traces of execution. 

The KPN formalism assumes blocking reads and non blocking writes, which may induce an infi- 
nite memory requirement on some channels. However, a KPN K subject to capacity constraints on its 
channels can straightforwardly be turned into another KPN K(d) (d G Z + "): all is needed is to emulate 
a blocking write with a blocking read e.g., to mirror each channel / by an opposite channel /' initially 
provided with df data and to require that each write, respectively read, operation on / be mirrored by a 
equivalent read, respectively write, operation on f. Of course, the properties of KPN K with respect to 
the data circulating on the channels are not preserved by this transformation and, in particular, K(d) may 
not be deadlock-free despite of the fact that K is. 

In essence, the liveness property defined in the previous section ensures that, for all possible inputs, 
an infinite amount of data circulates on at least one channel. Assume that a KPN K(d) is live, then 
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a straightforward consequence of the determinism property of KPN is that any KPN K(d') such that 
d' >d (i.e., V/ G F, d'j > df) is also live. Indeed, the liveness of K[d) implies that, for any input a, any 
given trace of execution co(a) of K(d) is such that an infinite amount of data circulates on at least one 
channel and since co(a) is also a valid trace of execution of K(d'), from the determinism property, all 
traces of execution of K(d') on a are also such that an infinite amount of data circulates on at least one 
channel and, thus, K(d') is live. It follows that, given a DPN, if we can find d G Z' F ' such that either 
{x : Ax < b(d),x G Z"} = or {x : Ax < b(d),x G W} = 0, then for any d' G l) F \ such that d' > d, the 
DPN is live. 

4.2 Verifying memory boundedness 

Recall integer linear system ((9]), assume that df = z (V/ G F) and consider the following Integer Linear 
Program 

Zip = Maximize z 
A'y < b', 

y£Z n+1 , (10) 

where vector y is the concatenation of vector x and scalar z. This program is straightforwardly derived 
from system ([9]) by replacing df by z in constraints Q as well as constraints ([5]> or ([8]) (depending on 
which of the two applies) and by moving z to the LHS. 



In essence, from the monotony property derived in Sect. 4.1 any solution to the above program 
provides the largest value of z such that the network is not live and, thus, for any dimensionning d G 
such that V/ G F, df > zip the network is live. Three cases can then occurs. Case 1: the ILP has no 
solution, a degenerate case which can occur only for networks with no channels (since, due to Eq. ([TJ), 
all transitions are effective). This latter case in hereafter ignored. Case 2: zip < oo, which is sufficient 
to establish that the network is live and memory bounded. Case 3: zip = 00 in which case we cannot 
conclude with respect to both liveness and memory boundedness. Furthermore, when zip < °°, letting 
df = Zip + 1 (V/ G F) gives a (presumably small) channel buffer dimensioning which guarantees liveness. 



Again, it is possible to consider the continuous relaxation zlp of program ( |T0| ). In particular, when 
one wishes only to determine wether or not zip < 00 then it is necessary and sufficient to determine 
whether or not zlp < 00 as zip < 00 ^ zlp < °°- Indeed, a well known fact in the theory of linear and 
integer programming [2] states that if the integer hull Pj of a rational polyhedron P (i.e., the convex hull 
of the integral vectors in P ) is nonempty then maxjo: : x G P} is bounded if and only if max{cx : x G Pi} 
is bounded and, provided that G {y : A'y < b',y G this result applies to program ( [T0| and its 

relaxation. It follows that zlp < 00 provides a polynomial-time sufficient condition to establish both 
liveness and boundedness of a DPN which is equivalent to zip < °°. 



5 Remarks on algorithmic aspects 

Although zlp can be computed in polynomial-time, it can be expected, when zlp < °°, that the integrality 
gap, zlp — Zip, is often quite large. Thus, should one wishes to obtain a tight (if not the tightest) upper 
bound on the channel buffer dimensioning, there is a practically relevant need to either solve program 



( fT0| ) or at least to decrease the aforementioned integrality gap. 

Regarding the resolution of program ( fT0"| ), it should be emphasized that the polyhedron Pj = {y : A'y < 



b' , v G Z" + } (recall that the integer hull of a polyhedron is also a polyhedron) is generally not a polytope 
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(since the n x are not necessarily bounded). Therefore, in the general case, procedures which enumerate 
integer points inside the polyhedron, as those used in most off-the-shelf integer linear programming 
solvers, are doomed not to terminate. 

Thus, in order to guarantee termination in the present context, an (exterior) cutting plane approach 
must be used. As an example, Gomory's cutting plane algorithm is guaranteed to terminate (though 
generally after a prohibitively long time). A more practically promising approach, consists in using 
specially tailored classes of inequalities derived from a polyhedral study of the geometric structure of Pj 
so as to derive a custom cutting plane algorithm. 
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